I study security and share my knowledge.

Recent posts

ZIP Slip Vulnerability

์ทจ์•ฝ์ ์€ Path Traversal ์ทจ์•ฝ์ ์˜ ํ•œ ๋ถ€๋ถ„์œผ๋กœ ์•„์นด์ด๋ธŒ ํŒŒ์ผ์—์„œ ํŒŒ์ผ์„ ์ถ”์ถœํ•˜๋Š” ๋™์•ˆ ๋””๋ ‰ํ„ฐ๋ฆฌ๋ฅผ ํ†ต๊ณผํ•˜๋Š” ๊ณผ์ •์—์„œ ๋ฐœ์ƒํ•œ๋‹ค. ์ด๊ฒŒ ๋ฌด์Šจ ์†Œ๋ฆฌ๋ƒ? ์••์ถ•๋œ ํŒŒ์ผ ํ˜น์€ ์•„์นด์ด๋ธŒ ํŒŒ์ผ์—์„œ ํŒŒ์ผ๋ช…์ด ์ ˆ๋Œ€๊ฒฝ๋กœ ๋กœ ํ‘œ์‹œ๋œ ๊ฒฝ๋กœ ๋ช…์œผ๋กœ ๋˜์–ด ์žˆ๋Š” ๊ฒฝ์šฐ, Unarchive ๋˜๋ฉด์„œ...

PermX - WriteUP

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://app.hackthebox.com/machines/PermX ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Editorial ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ vHOST ํƒ์ƒ‰์œผ๋กœ lmsํ•˜์œ„๋„๋ฉ”์ธ ์‹๋ณ„ Chamilo lms CVE ์‹๋ณ„ ๋ฐ ํŒŒ์ผ ์—…๋กœ๋“œ ์ทจ์•ฝ์ ์„ ํ†ตํ•ด ...

HA Joker CTF

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://tryhackme.com/r/room/jokerctf ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Dreaming ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ ์ •๋ณด ์ˆ˜์ง‘ ๋””๋ ‰ํ„ฐ๋ฆฌ ๋ถ€๋ฅดํŠธ ํฌ์‹ฑ์œผ๋กœ /app ๊ฒฝ๋กœ ํ™•๋ณด pluck CMS 4.7.13 ์˜ CVE๊ฐ€ ์กด์žฌ ์›น์‰˜...

Dreaming - WriteUP

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://tryhackme.com/r/room/dreaming ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Dreaming ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ ์ •๋ณด ์ˆ˜์ง‘ ๋””๋ ‰ํ„ฐ๋ฆฌ ๋ถ€๋ฅดํŠธ ํฌ์‹ฑ์œผ๋กœ /app ๊ฒฝ๋กœ ํ™•๋ณด pluck CMS 4.7.13 ์˜ CVE๊ฐ€ ์กด์žฌ ์›น์‰˜...

pspy64

pspy ๋ž€ ๋ฌด์—‡์ธ๊ฐ€? ๋ฆฌ๋ˆ…์Šค ์‹œ์Šคํ…œ์—์„œ ์‹คํ–‰ ์ค‘์ธ ํ”„๋กœ์„ธ์Šค๋ฅผ ์‹ค์‹œ๊ฐ„ ๋ชจ๋‹ˆํ„ฐ๋ง ๋ฐ ์ƒˆ๋กœ์šด ํ”„๋กœ์„ธ์Šค๋ฅผ ๊ฐ์ง€ํ•˜๋Š” ๋„๊ตฌ๋กœ์„œ, root๊ถŒํ•œ ์—†์ด ์‚ฌ์šฉ์ด ๊ฐ€๋Šฅํ•˜๋ฉฐ, ์‹œ์Šคํ…œ์˜ ๋ชจ๋“  ํ”„๋กœ์„ธ์Šค๋ฅผ ์ถ”์ ํ•  ์ˆ˜ ์žˆ๋‹ค. cron์„ ์‚ฌ์šฉํ•˜์ง€ ์•Š์•„๋„ cron ๊ณผ ์œ ์‚ฌํ•œ ๋ฐ˜๋ณต๋œ ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•˜๋Š” ํ”„๋กœ์„ธ...